Singtel hit by data theft breach
Incident
Summary
Hide ▲
Show ▼
A confirmed UNC3886 breach of Singapore’s four largest telcos—Singtel, StarHub, M1, and Simba—created a multi-organization compromise risk across a critical national communications sector. Attackers gained limited access to critical systems after using a zero-day exploit to get past perimeter defenses. Authorities said they found no evidence of customer data theft and no service disruption, but the intrusion still exposed sensitive telecom infrastructure to further abuse.
Related Happenings
Interlock Cisco Secure Firewall Management Center zero-day exploitation wave
Exploitation Wave
H score59
First: 18.03.2026 18:53
Last: 18.03.2026 18:53
Sources 1
About this happening:
A zero-day exploitation wave tied to Interlock has been hitting Cisco Secure Firewall Management Center (FMC), putting enterprise firewalls at risk before patching...
Interlock Cisco Secure Firewall Management Center zero-day exploitation wave
Exploitation WaveAbout this happening: A zero-day exploitation wave tied to Interlock has been hitting Cisco Secure Firewall Management Center (FMC), putting enterprise firewalls at risk before patching...
TELUS Digital hit by network compromise
Incident
H score82
First: 12.03.2026 16:40
Last: 12.03.2026 16:40
Sources 1
About this happening:
TELUS Digital confirmed a cybersecurity incident involving unauthorized access to a limited number of systems, and the company is still determining what was taken. The inc...
TELUS Digital hit by network compromise
IncidentAbout this happening: TELUS Digital confirmed a cybersecurity incident involving unauthorized access to a limited number of systems, and the company is still determining what was taken. The inc...
Singapore disrupts UNC3886 telco intrusion campaign
Law Enforcement
H score34
First: 10.02.2026 14:30
Last: 10.02.2026 14:30
Sources 1
About this happening:
Singapore disrupted UNC3886 attacks against the country's four telecommunications operators, ending a secret 11-month counter-cyber operation. The effort, known as...
Singapore disrupts UNC3886 telco intrusion campaign
Law EnforcementAbout this happening: Singapore disrupted UNC3886 attacks against the country's four telecommunications operators, ending a secret 11-month counter-cyber operation. The effort, known as...
UNC3886 campaign against Singapore telecommunications sector
Campaign
H score40
First: 09.02.2026 19:01
Last: 09.02.2026 19:01
Sources 1
About this happening:
UNC3886 mounted a deliberate espionage campaign against Singapore's telecommunications sector, putting all four major telcos at risk. The operation targeted M1,...
UNC3886 campaign against Singapore telecommunications sector
CampaignAbout this happening: UNC3886 mounted a deliberate espionage campaign against Singapore's telecommunications sector, putting all four major telcos at risk. The operation targeted M1,...
ShinyHunters Salesforce extortion campaign against global companies in 2025
Campaign
H score84
First: 15.01.2026 17:45
Last: 15.01.2026 17:45
Sources 1
About this happening:
The ShinyHunters campaign now includes a Qantas breach disclosed after the airline found a June 30, 2025 intrusion in a third-party platform used by one customer s...
ShinyHunters Salesforce extortion campaign against global companies in 2025
CampaignAbout this happening: The ShinyHunters campaign now includes a Qantas breach disclosed after the airline found a June 30, 2025 intrusion in a third-party platform used by one customer s...
Timeline
-
10.02.2026 00:47 2 articles · 5mo ago
UNC3886 telecom intrusion details and containment update
Technical Analysis UpdateSingapore authorities said UNC3886 breached Singtel, StarHub, M1, and Simba, used a zero-day exploit to bypass perimeter firewalls, and relied on rootkits to remain stealthy while maintaining persistence. Investigators confirmed compromise across all four operators, found no evidence that sensitive customer data was accessed or stolen, and reported no service disruption, while containment actions closed access points, expanded monitoring across critical infrastructure, and supported Operation Cyber Guardian after the intrusions were disclosed in July 2025.
Show sources
- Chinese cyberspies breach Singapore's four largest telcos — www.bleepingcomputer.com — 10.02.2026 00:47
- Chinese cyberspies breach Singapore's four largest telcos — www.bleepingcomputer.com — 10.02.2026 00:47